$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa File: c0ba95f7-f662-491c-8d5f-68532e494cdd.roa (raw, json) Hash identifier: OYjtz5xsqQPu8z0BF2d/X7wyKo1hG6rEtzUDCm2pyK0= Subject key identifier: F0:9A:DE:2E:FB:D2:BF:3B:4F:87:76:F3:3F:2B:34:70:BF:4A:DE:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CA3FD8DF6B30AFE5D3D45F66397FD71689A1E24 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa Signing time: Tue 08 Jul 2025 16:51:49 +0000 ROA not before: Tue 08 Jul 2025 16:51:49 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a3:fd:8d:f6:b3:0a:fe:5d:3d:45:f6:63:97:fd:71:68:9a:1e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:51:49 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=b30b3df0e2535ff60a4f94dff557876f2620c8b80e4dfc7d009595b4a4ae22d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:43:a7:25:c8:9c:72:39:35:93:ee:f5:15:ee: 09:40:c2:eb:49:b3:43:11:53:6d:be:ad:47:62:a9: 57:e0:89:ec:f0:d0:0a:a5:fe:63:13:be:0c:b0:ae: e4:40:18:db:88:e6:fb:ba:e9:a7:55:0e:ca:7b:e2: 26:eb:91:89:1e:a2:35:ff:8d:29:0a:5a:92:0e:64: 1c:d4:0f:4e:dd:79:cd:37:b4:09:f6:7b:32:1d:dc: c7:b2:9b:72:bd:8b:5c:c7:1c:28:24:d7:b3:44:e3: f3:47:dc:12:2e:e8:51:ec:02:61:3f:61:34:51:7f: 22:b4:1e:b3:9b:86:02:4b:9e:db:56:ae:8a:20:6f: b0:53:5e:cc:63:8b:35:7a:a3:52:63:09:78:21:46: a4:f7:b3:21:0b:1c:1b:b1:f2:32:41:d3:5e:98:2e: 56:d1:2c:5c:2b:3b:e9:d1:21:61:b0:5e:1d:1c:57: 74:79:b5:b1:dc:fc:af:94:13:1a:41:63:f5:92:a1: 10:62:a5:be:bc:e1:9d:e1:86:97:82:0e:7d:d0:39: c3:4d:e7:0a:bc:3c:ba:de:80:bd:e4:a1:37:6a:0c: fd:e6:0a:e3:41:d8:8a:3e:7b:68:31:6d:76:75:d6: 78:e0:38:f8:ef:82:18:e2:d1:8f:44:13:89:03:7d: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:DE:2E:FB:D2:BF:3B:4F:87:76:F3:3F:2B:34:70:BF:4A:DE:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/36 Signature Algorithm: sha256WithRSAEncryption 80:fd:01:07:2a:c9:d0:3b:5f:7d:ba:a7:89:97:87:25:da:3b: d1:80:5f:b7:ab:c0:f1:81:6e:16:2d:77:15:30:7c:cd:0c:38: c4:65:c1:94:ef:1d:d2:3b:b6:8f:fc:60:1e:97:4e:c7:fd:38: 85:af:6c:f6:80:22:72:38:33:43:53:17:6e:aa:27:53:45:ff: ca:60:69:01:14:39:f7:64:28:12:25:4a:22:49:5e:c8:b2:54: 06:6b:c5:33:bf:84:e9:e4:da:04:bb:21:fb:1c:02:3e:11:49: a8:5d:8a:5a:89:5b:0f:fa:0c:91:a9:03:66:12:6d:9b:cc:e0: c1:c8:e7:43:bf:78:ba:3c:eb:03:51:b5:b9:5c:0e:fb:1b:d1: e0:18:e0:bf:ca:6f:05:ec:55:b7:c0:c4:74:68:03:06:1c:4e: e0:71:26:f6:69:94:1c:9c:88:38:73:0c:77:a8:15:88:09:c7: c3:1b:96:17:43:71:e8:97:2a:77:3b:42:2b:42:32:8d:be:ec: f6:24:0d:37:2c:1a:a4:26:a9:5b:70:37:f0:0b:26:f7:89:a6: 63:56:14:6f:5f:dc:8b:c2:18:23:4f:0a:db:9a:f2:92:9f:4f: e8:e5:fb:4a:55:ce:4a:67:dc:a0:d6:a0:a3:b0:8b:f2:73:ff: a2:1d:a2:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfKP9jfazCv5dPUX2Y5f9cWiaHiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MTQ5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzBiM2RmMGUyNTM1ZmY2MGE0Zjk0ZGZmNTU3ODc2ZjI2 MjBjOGI4MGU0ZGZjN2QwMDk1OTViNGE0YWUyMmQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8Q6clyJxyOTWT7vUV7glAwutJs0MRU22+rUdiqVfgiezw 0Aql/mMTvgywruRAGNuI5vu66adVDsp74ibrkYkeojX/jSkKWpIOZBzUD07dec03 tAn2ezId3Meym3K9i1zHHCgk17NE4/NH3BIu6FHsAmE/YTRRfyK0HrObhgJLnttW roogb7BTXsxjizV6o1JjCXghRqT3syELHBux8jJB016YLlbRLFwrO+nRIWGwXh0c V3R5tbHc/K+UExpBY/WSoRBipb684Z3hhpeCDn3QOcNN5wq8PLregL3koTdqDP3m CuNB2Io+e2gxbXZ11njgOPjvghji0Y9EE4kDfTAdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8JreLvvSvztPh3bzPys0cL9K3vswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwYmE5NWY3LWY2NjItNDkxYy04ZDVmLTY4NTMyZTQ5NGNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAgP0BByrJ0DtffbqniZeHJdo7 0YBft6vA8YFuFi13FTB8zQw4xGXBlO8d0ju2j/xgHpdOx/04ha9s9oAicjgzQ1MX bqonU0X/ymBpARQ592QoEiVKIkleyLJUBmvFM7+E6eTaBLsh+xwCPhFJqF2KWolb D/oMkakDZhJtm8zgwcjnQ794ujzrA1G1uVwO+xvR4Bjgv8pvBexVt8DEdGgDBhxO 4HEm9mmUHJyIOHMMd6gViAnHwxuWF0Nx6JcqdztCK0Iyjb7s9iQNNywapCapW3A3 8Asm94mmY1YUb1/ci8IYI08K25rykp9P6OX7SlXOSmfcoNago7CL8nP/oh2iMA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:15 2025 by rpki-client